QWEWCD
Static task
static1
Behavioral task
behavioral1
Sample
b2dcec8f6245589470750030eb023f4b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b2dcec8f6245589470750030eb023f4b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b2dcec8f6245589470750030eb023f4b_JaffaCakes118
-
Size
6KB
-
MD5
b2dcec8f6245589470750030eb023f4b
-
SHA1
022ade8c8e81735078b30d7883267461c91941d2
-
SHA256
d3464b0a8cc5741c7577f2a64704963f9fdbb48a7b6f61ae1056d758aefbfadf
-
SHA512
d9ad7d16429aa4e102a5adf87a5ea9d408eba4b06cd0f29f92773c0fd2cef6591ce67a025f92bd1da2142aadf72c71dd7ee9812ae346c61df2bdcec3776c29c0
-
SSDEEP
96:u5vobxfiIqcIdQo2RslpFpeFyW5nKEpIh8S0nNffYXkgcwQwTpNG:0vMrC1XFpev5ahoN2kgUw9w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2dcec8f6245589470750030eb023f4b_JaffaCakes118
Files
-
b2dcec8f6245589470750030eb023f4b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE